correctness proof of partial evaluation